2021 CVE Vulnerabilities
23,451 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-42668 | CRITICAL | 9.8 | 4.7% | Nov 5, 2021 | A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter in the my_cla... |
| CVE-2021-42667 | CRITICAL | 9.8 | 15.8% | Nov 5, 2021 | A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-manag... |
| CVE-2021-42666 | HIGH | 8.8 | 4.4% | Nov 5, 2021 | A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quiz_quest... |
| CVE-2021-42665 | CRITICAL | 9.8 | 4.9% | Nov 5, 2021 | An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of inde... |
| CVE-2021-42664 | MEDIUM | 5.4 | 1.6% | Nov 5, 2021 | A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the (1) Q... |
| CVE-2021-42663 | MEDIUM | 4.3 | 3.8% | Nov 5, 2021 | An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via th... |
| CVE-2021-42662 | MEDIUM | 5.4 | 1.6% | Nov 5, 2021 | A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking and Reservation System i... |
| CVE-2021-26844 | MEDIUM | 5.4 | 0.7% | Nov 5, 2021 | A cross-site scripting (XSS) vulnerability in Power Admin PA Server Monitor 8.2.1.1 allows remote attackers to inject ar... |
| CVE-2021-42237 | CRITICAL | 9.8 | 97.9% | Nov 5, 2021 | Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it... |
| CVE-2021-25509 | HIGH | 7.1 | 0.2% | Nov 5, 2021 | A missing input validation in Samsung Flow Windows application prior to Version 4.8.5.0 allows attackers to overwrite ab... |
| CVE-2021-25508 | CRITICAL | 9.8 | 0.8% | Nov 5, 2021 | Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abus... |
| CVE-2021-25507 | MEDIUM | 5.7 | 0.3% | Nov 5, 2021 | Improper authorization vulnerability in Samsung Flow mobile application prior to 4.8.03.5 allows Samsung Flow PC applica... |
| CVE-2021-25506 | MEDIUM | 5.5 | 0.2% | Nov 5, 2021 | Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider... |
| CVE-2021-25505 | HIGH | 7.8 | 0.6% | Nov 5, 2021 | Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is un... |
| CVE-2021-25504 | MEDIUM | 4 | 0.2% | Nov 5, 2021 | Intent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access contact information. |
| CVE-2021-25503 | MEDIUM | 6.7 | 0.1% | Nov 5, 2021 | Improper input validation vulnerability in HDCP prior to SMR Nov-2021 Release 1 allows attackers to arbitrary code execu... |
| CVE-2021-25502 | MEDIUM | 5.5 | 0.1% | Nov 5, 2021 | A vulnerability of storing sensitive information insecurely in Property Settings prior to SMR Nov-2021 Release 1 allows ... |
| CVE-2021-25501 | LOW | 3.3 | 0.1% | Nov 5, 2021 | An improper access control vulnerability in SCloudBnRReceiver in SecTelephonyProvider prior to SMR Nov-2021 Release 1 al... |
| CVE-2021-25500 | MEDIUM | 4.4 | 0.1% | Nov 5, 2021 | A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE... |
| CVE-2021-39913 | MEDIUM | 6.7 | 0.3% | Nov 5, 2021 | Accidental logging of system root password in the migration log in all versions of GitLab CE/EE before 14.2.6, all versi... |
| CVE-2021-39912 | MEDIUM | 5.3 | 1.4% | Nov 5, 2021 | A potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a malformed TIFF images w... |
| CVE-2021-39911 | MEDIUM | 4.3 | 0.7% | Nov 5, 2021 | An improper access control flaw in all versions of GitLab CE/EE starting from 13.9 before 14.2.6, all versions starting ... |
| CVE-2021-39909 | MEDIUM | 5.3 | 0.6% | Nov 5, 2021 | Lack of email address ownership verification in the CODEOWNERS feature in all versions of GitLab EE starting from 11.3 b... |
| CVE-2021-39907 | MEDIUM | 5.3 | 1.4% | Nov 5, 2021 | A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data from... |
| CVE-2021-39906 | MEDIUM | 6.1 | 60.7% | Nov 5, 2021 | Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaSc... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now